$ rpki-client -vvf rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft File: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft (raw, json) Hash identifier: murmd/vSQXPt3j55wBjKyBS9KTlDeDSmMgs27R65ZLk= Subject key identifier: 9E:AA:D9:02:17:E8:36:E3:E8:89:66:F6:50:1E:8F:6B:57:72:61:38 Authority key identifier: D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 Certificate issuer: /CN=A91A822F/serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft Manifest number: C4 Signing time: Fri 25 Apr 2025 04:51:50 +0000 Manifest this update: Fri 25 Apr 2025 04:51:49 +0000 Manifest next update: Fri 02 May 2025 04:51:49 +0000 Files and hashes: 1: 2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl (hash: mpO50MF4ETXfrbQuHATcW+WAMEdu8aGmQTlqGRRqfqk=) 2: F220949E1C3411EFAF8F6A5BC4F9AE02.roa (hash: FuzVkN28KBSRdE3py4BBCf6dkz1hoCYnNgurT7k+8YU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:51:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A822F, serialNumber=D9872C193E18DC151FE3EF9E29AFE83121B24D10 Validity Not Before: Apr 25 04:51:49 2025 GMT Not After : May 2 04:51:49 2025 GMT Subject: CN=680b14e5-ade4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:e5:cf:c4:fe:34:b2:91:86:c7:de:09:2a: f7:5b:4a:c4:76:8f:e6:24:02:67:e5:ad:97:da:35: 24:8a:67:48:40:a4:5e:8c:39:3d:38:24:55:b3:72: 16:f6:cc:e7:99:65:9d:ad:06:da:5e:9c:12:fc:80: 1b:57:d1:e2:47:a3:ad:77:bb:2e:4b:ff:b9:7f:6a: 75:2f:56:af:87:28:c2:bc:23:57:a6:6c:29:9f:f1: 2b:da:fe:51:c6:bf:35:0f:81:3b:0d:c6:09:7d:55: 37:eb:8e:fb:44:29:1c:55:d7:e6:28:c8:b7:91:19: 01:02:45:f6:60:58:81:01:23:35:c8:1b:f9:82:31: de:c0:96:95:62:7c:ca:b9:da:6b:65:67:e9:65:e1: cb:4a:e5:8b:1b:9a:5e:a9:49:44:cd:0d:eb:82:6e: fe:49:c9:8f:3f:4d:68:15:a5:e7:e5:42:b5:2f:ac: 5f:d7:4c:09:99:76:32:8e:76:d4:0c:ab:20:63:13: a1:8b:48:58:93:07:0c:23:c7:e5:85:ce:ed:67:2c: 0a:12:7a:bf:cd:7e:dc:53:ae:25:b9:59:e0:8c:94: 8f:e4:53:40:74:09:05:55:b9:68:12:1c:7e:65:7f: 12:e7:8a:86:5a:0b:c9:ba:70:5b:6e:f3:c0:0f:bd: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:AA:D9:02:17:E8:36:E3:E8:89:66:F6:50:1E:8F:6B:57:72:61:38 X509v3 Authority Key Identifier: keyid:D9:87:2C:19:3E:18:DC:15:1F:E3:EF:9E:29:AF:E8:31:21:B2:4D:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2YcsGT4Y3BUf4--eKa_oMSGyTRA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A822F/5842D304F7F011EE98C8C92BC4F9AE02/2YcsGT4Y3BUf4--eKa_oMSGyTRA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:aa:31:ac:c0:b7:99:26:77:ff:2e:7e:2f:ef:b9:68:32: 34:4c:fd:73:d3:94:5e:f0:fa:9a:d9:75:17:14:1e:a6:50:82: c0:2f:4e:f0:c3:3f:d7:bf:47:1b:41:a1:c3:02:c4:ef:03:1b: b8:ea:a1:1e:6f:dd:3e:21:2d:23:95:04:1f:f4:f0:0f:a9:64: da:26:25:87:85:98:ba:52:e7:3f:5a:e4:bc:3d:76:bf:6e:c8: b0:a4:ff:25:f8:4b:2a:bb:3e:b1:c3:73:4b:fc:d0:88:b5:fb: 95:5f:4e:49:a8:37:81:a3:4c:67:2a:b5:79:8d:45:30:7a:14: 9d:e9:4a:c5:7a:a6:da:c0:8f:83:ca:4e:74:07:88:58:a3:6d: 0d:f9:dc:02:3f:3a:5f:7c:e6:51:fc:6c:4a:ab:48:00:3d:58: da:ed:63:75:72:a6:62:5b:fc:c2:1e:8f:fe:60:95:d0:88:fd: 29:39:ad:da:fa:50:3f:79:d5:80:6d:da:5d:71:2a:d7:c8:82: 65:c0:75:cc:26:20:c4:91:ec:ca:88:51:a7:4c:7c:25:af:9b: f6:86:6a:f5:7a:3a:34:7e:b1:9b:fe:df:86:8e:4a:a2:76:89: 25:ca:cc:b7:9e:e3:2f:07:8c:9e:b9:6a:25:84:2f:05:e2:d9: 5a:69:d8:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgyMkYxMTAvBgNVBAUTKEQ5ODcyQzE5M0UxOERDMTUxRkUzRUY5RTI5QUZFODMx MjFCMjREMTAwHhcNMjUwNDI1MDQ1MTQ5WhcNMjUwNTAyMDQ1MTQ5WjAYMRYwFAYD VQQDEw02ODBiMTRlNS1hZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArXTlz8T+NLKRhsfeCSr3W0rEdo/mJAJn5a2X2jUkimdIQKRejDk9OCRVs3IW 9sznmWWdrQbaXpwS/IAbV9HiR6Otd7suS/+5f2p1L1avhyjCvCNXpmwpn/Er2v5R xr81D4E7DcYJfVU36477RCkcVdfmKMi3kRkBAkX2YFiBASM1yBv5gjHewJaVYnzK udprZWfpZeHLSuWLG5peqUlEzQ3rgm7+ScmPP01oFaXn5UK1L6xf10wJmXYyjnbU DKsgYxOhi0hYkwcMI8flhc7tZywKEnq/zX7cU64luVngjJSP5FNAdAkFVbloEhx+ ZX8S54qGWgvJunBbbvPAD71IpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6q2QIX 6Dbj6Ilm9lAej2tXcmE4MB8GA1UdIwQYMBaAFNmHLBk+GNwVH+Pvnimv6DEhsk0Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODIyRi81ODQyRDMwNEY3 RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNCVWY0LS1lS2Ffb01TR3lU UkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJZY3NHVDRZM0JVZjQtLWVLYV9vTVNHeVRSQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODIyRi81ODQyRDMwNEY3RjAxMUVFOThDOEM5MkJDNEY5QUUwMi8yWWNzR1Q0WTNC VWY0LS1lS2Ffb01TR3lUUkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHPKoxrMC3mSZ3/y5+L++5aDI0TP1z05Re8Pqa2XUXFB6mUILAL07w wz/Xv0cbQaHDAsTvAxu46qEeb90+IS0jlQQf9PAPqWTaJiWHhZi6Uuc/WuS8PXa/ bsiwpP8l+Esquz6xw3NL/NCItfuVX05JqDeBo0xnKrV5jUUwehSd6UrFeqbawI+D yk50B4hYo20N+dwCPzpffOZR/GxKq0gAPVja7WN1cqZiW/zCHo/+YJXQiP0pOa3a +lA/edWAbdpdcSrXyIJlwHXMJiDEkezKiFGnTHwlr5v2hmr1ejo0frGb/t+Gjkqi doklysy3nuMvB4yeuWolhC8F4tlaadgk -----END CERTIFICATE-----Generated at Sat Apr 26 05:09:16 2025 by rpki-client